Files
hermes-agent/tests
joaomarcos 3966e5de94 security(state): harden async_delegation's direct state.db writer
tools/async_delegation.py:_connect() opens the same state.db as
SessionDB via a bare sqlite3.connect(), bypassing the owner-only
(0600) hardening added for SessionDB. Apply the same
_create_owner_only / _secure_wal_files policy here, reusing
hermes_state's helpers (managed/container skip included).

Addresses teknium1's review on #59716.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-12 20:43:42 -07:00
..